PT-2026-54643 · Unknown · Raop Module

Tristan · Published 2026-07-01 · Updated 2026-07-01 · CVE-2026-14324

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions RAOP module (affected versions not specified)

Description The RAOP module accepts unbounded Content-Length values and fails to verify the return value of the pw array add() function. This lack of validation can lead to memory management issues when processing incoming requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-14324

Affected Products

Raop Module

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-14324 · Security Note
• https://t.me/cveNotify/183679 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2495903 · Note
• https://access.redhat.com/security/cve/CVE-2026-14324 · Note